Lucene search

K

Joplin Security Vulnerabilities - 2020

cve

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.

6.1CVSS

6.2AI Score

0.004EPSS

2020-09-24 07:15 PM

60

cve

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.

6.1CVSS

5.8AI Score

0.001EPSS

2020-11-06 07:15 AM

65

cve

Joplin through 1.0.184 allows Arbitrary File Read via XSS.

5.4CVSS

5.5AI Score

0.003EPSS

2020-02-17 04:15 PM

70